Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/BDUt_AqrF9Z57L3BVIPrb_s9Dsk.roa
File: BDUt_AqrF9Z57L3BVIPrb_s9Dsk.roa (raw, json)
Hash identifier: 3VlvIEXyrEUz5ocJavFRWJmYihMipyaSbfyHuX90514=
Subject key identifier: 04:35:2D:FC:0A:AB:17:D6:79:EC:BD:C1:54:83:EB:6F:FB:3D:0E:C9
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 019D1344CF82A98F92B6F10C52BA8926E1A3
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/BDUt_AqrF9Z57L3BVIPrb_s9Dsk.roa
Signing time: Sun 22 Mar 2026 01:59:29 +0000
ROA not before: Sun 22 Mar 2026 01:59:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50833
IP address blocks: 45.159.110.0/23 maxlen: 23
91.224.59.0/24 maxlen: 24
193.150.128.0/24 maxlen: 24
193.150.129.0/24 maxlen: 24
2001:7f8:f6::/48 maxlen: 48
2a02:5e80:2::/48 maxlen: 48
2a10:24c0:272::/48 maxlen: 48
2a10:24c0:6c2::/48 maxlen: 48
2a10:24c0:ad1b::/48 maxlen: 48
2a10:24c0:ada1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:13:44:cf:82:a9:8f:92:b6:f1:0c:52:ba:89:26:e1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Mar 22 01:59:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04352dfc0aab17d679ecbdc15483eb6ffb3d0ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:80:8c:da:33:50:2e:7a:28:09:1a:e6:22:
9e:e7:97:ff:63:fc:6b:18:a1:70:b6:c2:33:28:92:
f0:0c:f4:a6:e9:8f:90:1a:d0:08:f9:4d:fd:a7:80:
ce:e3:59:1c:3b:03:72:3f:d3:3a:88:c4:04:32:49:
97:06:67:be:70:34:91:55:9e:29:e1:7b:0d:01:7c:
48:bb:6f:84:55:f0:00:c1:7d:e3:de:78:e2:f8:fd:
50:40:4a:e1:5f:94:09:91:69:e4:ce:d4:b3:9d:c3:
b9:e2:d6:0f:36:a1:ba:50:04:f2:9b:46:73:76:f2:
04:61:17:f8:94:c6:19:65:28:72:83:3e:af:b8:a5:
db:10:51:69:c7:b6:b8:b6:88:95:ed:77:83:36:cc:
95:02:eb:1f:6c:c4:6c:6c:16:af:c4:82:fa:e6:54:
65:7c:93:17:30:5e:91:3d:ba:81:25:18:0e:be:5b:
e8:49:ae:b0:e9:1d:7c:ed:e8:f2:0c:38:31:1b:c4:
25:2e:05:6f:8d:1d:2d:64:0d:33:40:6c:cd:1a:3e:
f8:b8:46:33:a5:1d:9c:88:9c:9f:3a:4a:21:3f:77:
ff:e2:62:10:92:ed:f3:88:7f:e4:30:e4:be:92:d1:
f8:77:a1:9e:77:6f:7d:2b:6a:53:f6:e6:13:9a:41:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:35:2D:FC:0A:AB:17:D6:79:EC:BD:C1:54:83:EB:6F:FB:3D:0E:C9
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/BDUt_AqrF9Z57L3BVIPrb_s9Dsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.110.0/23
91.224.59.0/24
193.150.128.0/23
IPv6:
2001:7f8:f6::/48
2a02:5e80:2::/48
2a10:24c0:272::/48
2a10:24c0:6c2::/48
2a10:24c0:ad1b::/48
2a10:24c0:ada1::/48
Signature Algorithm: sha256WithRSAEncryption
0d:43:64:86:55:16:45:23:0c:fc:54:76:40:9b:8a:55:33:4c:
65:2c:19:d3:4c:d9:e4:07:f9:e4:ec:44:5a:f8:25:62:1b:95:
0d:22:f6:16:87:a4:fb:8b:a1:21:88:82:2f:e7:70:23:54:bc:
79:71:1b:df:17:16:43:f5:a6:3a:b5:8a:33:a1:e1:1c:99:cd:
af:39:5a:2b:94:22:d6:d5:6d:b9:61:28:de:4a:6c:7c:35:57:
94:f8:f1:95:f6:6a:20:bf:76:d3:4e:e1:6e:c5:19:6c:ba:0a:
55:5f:2e:c9:84:81:4c:f1:9b:4f:fa:f3:e2:0d:9f:4f:c7:64:
e1:92:1b:d5:82:26:fb:df:e1:08:0e:6d:9f:d0:94:ac:10:11:
62:0b:59:14:98:f8:53:2c:31:2b:a2:e3:ac:61:59:f9:dc:60:
2c:ba:73:11:be:01:bf:af:24:b7:43:e5:04:33:d2:25:ab:75:
b4:2e:ad:2b:e8:c6:d7:30:ef:08:55:1a:69:9c:22:d3:2a:46:
4e:f6:4f:73:0e:0f:cf:73:18:d9:fd:66:31:5e:84:16:c0:7c:
25:d7:9c:44:12:c1:4a:fd:92:96:58:cb:bf:9b:36:6f:eb:7e:
3d:bd:ea:07:7f:d4:9d:eb:bb:47:6f:50:28:84:61:ab:50:56:
12:e3:4f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:07 2026 by rpki-client